gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (...

learn more… | top users | synonyms

33
votes
1answer
27k views

How to import secret gpg key (copied from one machine to another)?

I'm trying to copy my gpg key from one machine to another. I do: gpg --export ${ID} > public.key gpg --export-secret-key ${ID} > private.key Move files to new machine, and then: gpg --...
0
votes
3answers
517 views

creating and sending a self-signed public key using GnuPG in CentOS 7

I know that I can create a GPG keypair from the CentOS 7 terminal by typing gpg --gen-key and following the resulting steps, but how can I make sure that the resulting public key is self-signed? And ...
-2
votes
2answers
339 views

installing GnuGPG with Thunderbird on CentOS 7

How can I install GnuPG on my CentOS 7 system? I want to use GnuPG alongside Thunderbird and Enigmail to manage pgp keys, as per the instructions in this link. The problem is that the download ...
0
votes
1answer
41 views

gnupg broken after power outage

Recently I happend to experience a quite unpleasant power outage which caused my system to go down unexpectadly. After power came back the system came back as well and other than a fsck being required ...
0
votes
1answer
52 views

Enforcing minimum passphrase length with gpg

When encrypting a file with --symmetric option, gpg asks for the passphrase using the pinentry program (small window). I want it to reject passphrases below a certain length. How can I do this?
12
votes
1answer
3k views

How to renew an expired keypair with gpg

What is the best way to renew a gpg key pair when it got expired and what is the reason for the method? The key pair is already signed by many users and available on public servers. Should the new ...
-1
votes
1answer
31 views

Is app-crypt/gnupg on Portage or overlays?

I want to use multiple pgp key servers with the sks key server group witch imply gnupg-curl installation for the hkps protocol. But I didn’t find gnupg-curl as an ebuild in Portage or, at least, as a ...
6
votes
1answer
3k views

Get apt's key ids and fingerprints in machine-readable format

I'm trying to patch an issue in puppetlabs-apt to enable the use of key fingerprints as identifiers to ensure that a certain key is present by its 40-digit key fingerprint. I'm having difficulty ...
1
vote
1answer
197 views

Alias for perl script

So far while surfing web I've discovered nice addition to my gpg password generator and I've decided to adjust my alias with these commands. Here is the code gpg --gen-random 1 20 | perl -ne'print "...
5
votes
1answer
1k views

Connecting SSH and Git to gpg-agent

I'm running a YubiKey NEO with the OpenPGP applet to store my GPG keys on the smart card. I've stopped all other SSH and GPG agents manually by removing their startup entries (On elementary OS Luna, ...
3
votes
1answer
109 views

How to learn encryption type from a mail message?

I use Thunderbid, Enigmail, GnuPG and pinentry. When I receive encrypted message, how I can determine which algorithm is used: for encryption for checksuming (SHA1 or not) for compression
3
votes
2answers
2k views

Encrypt and sign with specific secret key

I have an OpenPGP smart card key (YubiKey NEO) as well as a local secret key installed in my GnuPG keyring. I'd like to encrypt and sign a file with my card's key, not the key in my keyring. How can ...
2
votes
1answer
298 views

how to disable gcr-prompter dialogs?

Whenever i save *.gpg files (symmetric password) using emacs the gcr-prompter displays dialog and asks me for password twice! It's so annoying, especially that my emacs remembers the password i type, ...
1
vote
1answer
38 views

Can I use my original GPG key even though I've re-installed Linux?

I'm a Debian user. I just created my own GPG public key. I'm just wondering if I re-install Linux on my system, is it possible to use the original GPG key or do I have to create a new one? NOTE: If ...
3
votes
2answers
121 views

monkeysphere to gnupg 2.1 workflow change

So, like many people, I was using my GPG key for SSH authentication with the help of monkeysphere, so I could load my private key to agent with monkeysphere s command and be free to connect anywhere I ...
5
votes
3answers
480 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
6
votes
2answers
361 views

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just ...
2
votes
3answers
513 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...
3
votes
3answers
560 views

Rearrange UIDs in GPG

In GPG, it possible to move a UID up or down in the list of UIDs in a PGP key? I realize it is a purely cosmetic thing, but I may want to use this to show priority among my addresses, which one ...
1
vote
1answer
301 views

apt-get update: How to check for GPG errors when using scripts?

When running. sudo apt-get update For example something like this could happen. W: GPG error: http://deb.torproject.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1409325681 ...
1
vote
1answer
111 views

GPG Problems When Releasing With Leiningen

I'm trying to use lein release (default, not the plugin). Now, I've installed gpg-agent and pinentry-curses, and gotten to the point where a separate curses screen appears, asking me for my secret ...
3
votes
3answers
80 views

downloading debian securely

I have a couple of questions on getting a genuine, unmolested version of Debian. MITM attacks are very real and many parties would love to hand you their own, backdoored version of software. I know ...
2
votes
0answers
276 views

How can I PGP decrypt an entire mbox?

Thunderbird cannot search PGP-encrypted emails. Hence, I was considering copying all my emails from IMAP to local storage, then decrypting them all locally, so that they are searchable. Is this ...
3
votes
3answers
4k views

Creating a GnuPG keyring for apache

Here's the scenario, we're using GnuPG to encrypt data between 2 web servers. 1 is on RHEL. GnuPG will be accessed through cgi scripts to encrypt and decrypt. So I need a keyring that the apache user ...
1
vote
0answers
337 views

gpg: Bad signature

I'm trying to sign a public PGP key but am encountering a 'Bad signature' error: gpg --edit-key someone@somedomain.com ... gpg> sign ... You need a passphrase to unlock the secret key for user: "...
3
votes
2answers
1k views

How do I make gpg-agent forget my passphrase automatically?

I'm using Thunderbird with enigmail and gpg. From thunderbird/enigmail, I can't make the gpg-agent forget my passphrase, enigmail tells me I'm using gpg-agent for passphrase management so enigmail can'...
2
votes
1answer
64 views

How close smartcard after sign rpm with GPG2?

Adding to this question: How do I close gnupg V2.0 smartcard after signing an rpm? I tried to execute: gpg-agent --default-cache-ttl 15 --max-cache-ttl 15 --daemon But after 15 seconds, if I ...
1
vote
1answer
514 views

How to configure gpg2 to pass smartcard PIN unless pinentry programm?

My configuration: Centos 6.5 gnugp2-2.0.14-6.el6_4.x86_64 gnupg2-smime-2.0.14-6.el6_4.x86_64 I configured gpg2 to use my signature key in smartcard gnupg V2.0. I imported my gpg signature key to ...
1
vote
1answer
86 views

Use non-default keyring with gnome-keyring

I'm using Gnome Keyring with GPG. Whenever I need to sign something, the keyring daemon takes over and does it for me. However, if I do: export GNUPGHOME=/path/to/keyring from a Bash script and use ...
3
votes
1answer
993 views

Debian: GPG cannot fetch Linux Kernel key

I am in the process of recompiling the kernel on Debian. Following the instructions on kernel.org, the first step is to verify the signature. But GPG complains that it cannot find the public key: # ...
2
votes
0answers
26 views

Password dialogs block keybindings

I am using XMonad 0.11, but this might be unrelated. I am using evolution 3.12.2 and this is related but the problem might be more general. After research it appears that the window in question is ...
2
votes
1answer
146 views

What GPG agent does Elementary Luna use?

Whenever I try decrypting or signing files with GPG in Elementary Luna, I see a graphical password prompt come up for my GPG key. The key is then cached in memory for future requests for some time. ...
9
votes
2answers
3k views

Adding “random number entropy” for GPG keys?

In the following video: Linux HOWTO: Secure Your Data with PGP, Part 2, you are shown how to create a key pair with gpg. At about 1:50, the instructor says the following: While the key is being ...
3
votes
2answers
7k views

How to automatically accept epel gpg key

The very first time that I install a package from epel, I am prompted if I want to import a GPG key. Notice how there are 2 'Is this ok' prompts when installing redis? [root@us-devops-build02 yum....
1
vote
2answers
414 views

sign and trust gpg key automatically via bash

I've got a question about gpg and signing a key automatically via bash: I've got a script, that is doing the beginning of signing: gpg --recv $schluessel1 gpg --edit $schluessel1 If I try something ...
0
votes
0answers
683 views

Using gpg-agent to decrypt password in cron job

I have two scripts that both need to decrypt passwords using gpg-agent. Both of them run fine when launched from the terminal. The problem is that when run via cron, they both fail with these messages:...
1
vote
0answers
84 views

Create global enviromental variable after boot

I know about /etc/profile and /etc/environment, but I would like to set a global environmental variable after boot and login. By global, I mean an environment variable that can be accessed by any ...
0
votes
1answer
63 views

Extract only the key(s) from GPG exported keypair

I have exported public and private keys to file with gpg --export and --export-secret-keys. When I examine them with gpg --list-packets. I can see that the file contains: the actual key the user ID ...
0
votes
1answer
125 views

Export format of gpg [closed]

What is the binary export / import format used bygpg for public and private keys?
1
vote
1answer
363 views

Examine exported binary gpg key

The commands gpg --export and gpg --export-secret-keys can be used to export keys in a binary format. Is there any command available to examine these exported binary key files? I need to see if the ...
7
votes
2answers
2k views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
4
votes
1answer
279 views

measure amount of data read from /dev/random

background I have written a collection of bash scripts (most of them in German only yet but if you are interested; download the archive not the single scripts) which help users create high-quality ...
2
votes
2answers
648 views

GnuPG : representations of key IDs and fingerprints

In gpg's man page, there are examples of key IDs : 234567C4 0F34E556E 01347A56A 0xAB123456 234AABBCC34567C4 0F323456784E56EAB 01AB3FED1347A5612 0x234AABBCC34567C4 and fingerprints : ...
9
votes
2answers
886 views

Cache all gpg subkey passwords at once? Prevent need for multiple gpg password entry?

Can I enter my gpg password just once and unlock all my sub keys (signing, decryption, authentication)? At the moment, I need to enter my gpg password three times (for signing, for decryption, for ...
1
vote
2answers
766 views

gpg-agent asks for a passphrase, but ssh private key doesn’t have one

I am migrating from ssh-agent to gpg-agent now and I also have a bunch of ssh keys, which are loaded at startup. The keys do not contain passphrases, but after calling ssh-add <filename>, gpg-...
8
votes
1answer
1k views

I fail to fetch GPG keys over HKPS with “gpgkeys: HTTP fetch error 1: unsupported protocol” error

I'm trying to fetch some GPG keys over keys.gnupg.net and hkps.pool.sks-keyservers.net and both fails with: gpg: requesting key 1F41B907 from hkps server hkps.pool.sks-keyservers.net gpgkeys: HTTP ...
3
votes
1answer
2k views

How to regenerate /etc/apt/trustdb.gpg on Debian?

Suppose one deleted (or damaged) the following file. /etc/apt/trustdb.gpg How to regenerate it?
2
votes
2answers
1k views

List all GPG/PGP keys of a local SKS key server

We have set up a local SKS keyserver in my company. It seems it is only possible to search keys (either for a name, email or keyid). However, there are not so many users, so we would like to make ...
1
vote
1answer
430 views

Duplicity and GPG: charset conversion

I'm using duplicity on OS X Mavericks. If I run my duplicity command, I get the following error: ===== Begin GnuPG log ===== gpg: conversion from `US-ASCII' to `utf-8' failed: Illegal byte sequence ...
1
vote
1answer
167 views

Set specific GPG key for specific recipient in mutt

I'm trying to make mutt use a specific GPG key when sending mails to a specific recipient, much like "per-recipient rules" in OpenPGP / Enigmail. For example, if I want to send an email to coworker@...